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(57) Abstract: In a Wireless Local Area Network (WLAN), trans- 
mission exchanged between a station (Station) and an access point 
(AP) is received using a detector (Detector) located adjacent to the 
station (Station). The received transmission are analyzed to deter- 
mine the state of the station (Station), where the state of the station 
(Station) indicates whether the station (Station) has authenticated 
and/or associated with the access point (AP) in the wireless Local 
Area Network. 
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DETERMINING THE STATE OF A STATION IN A LOCAL AREA 

NETWORK 

CROSS REFERENCE TO RELATED APPLICATION 
[0001] This application claims the benefit of an earlier filed provisional 
application U.S. Provisional Application Serial No. 60/370,996, entitled 
DETERMINING THE STATE OF A STATION IN A LOCAL AREA 
NETWORK, filed on April 8, 2002, the entire content of which is incorporated 
herein by reference. 

BACKGROUND 

1 . Field of the Invention 

[0002] The present invention generally relates to wireless local area networks. 
More particularly, the present invention relates to determining the state of a 
station in a wireless local area network. 

2. Description of the Related Art 

[0003] Computers have traditionally communicated with each other through 
wired local area networks ('TANs"). However, with the increased demand for 
mobile computers such as laptops, personal digital assistants, and the like, 
wireless local area networks ("WLANs") have developed as a way for computers 
to communicate with each other through transmissions over a wireless medium 
using radio signals, infrared signals, and the like. 

[0004] In order to promote interoperability of WLANs with each other and with 
wired LANs, the IEEE 802.1 1 standard was developed as an international 
standard for WLANs. Generally, the IEEE 802.1 1 standard was designed to 
present users with the same interface as an IEEE 802 wired LAN, while allowing 
data to be transported over a wireless medium. 

[0005] In accordance with the IEEE 802.1 1 standard, a station is authenticated 
and associated with an access point in the WLAN before obtaining service from 
the access point. During this authentication and association process, the station 
proceeds through 3 stages or states (i.e., State 1, State 2, and State 3). In State 1, 



1 



WO 03/088687 



PCT/US03/10626 



the station is unauthenticated and unassociated. In state 2, the station is 
authenticated but unassociated. In State 3, the station is authenticated and 
associated. If a station is having difficulty obtaining service from an access point, 
determining the state of the station can assist in trouble shooting the problem. 

SUMMARY 

[0006] In one embodiment of the present invention, in a wireless local area 
network, transmissions exchanged between a station and an access point is 
received using a detector located adjacent to the station. The received 
transmissions are analyzed to determine the state of the station, where the state of 
the station indicates whether the station has authenticated and/or associated with 
the access point in the wireless local area network. 

DESCRIPTION OF THE DRAWING FIGURES 
[0007] The present invention can be best understood by reference to the following 
detailed description taken in conjunction with the accompanying drawing figures, 
in which like parts may be referred to by like numerals: 
[0008] Fig. 1 shows an exemplary Open Systems Interconnection (OSI) seven 
layer model; 

[0009] Fig. 2 shows an exemplary extended service set in a wireless local area 
network ("WLAN"); 

[0010] Fig. 3 is an exemplary flow diagram illustrating various states of stations 
inaWLAN; 

[0011] Fig. 4 shows an exemplary embodiment of an access point and a station 
exchanging transmissions; and 

[0012] Fig. 5 shows another exemplary embodiment of an access point and a 
station exchanging transmissions. 

DETAILED DESCRIPTION 
[0013] In order to provide a more thorough understanding of the present 
invention, the following description sets forth numerous specific details, such as 
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specific configurations, parameters, examples, and the like. It should be 
recognized, however, that such description is not intended as a limitation on the 
scope of the present invention, but is intended to provide a better description of 
the exemplary embodiments. 

[0014] With reference to Fig. 1, an exemplary Open Systems Interconnection 
(OSI) seven layer model is shown, which represents an abstract model of a 
networking system divided into layers according to their respective 
functionalities. In particular, the seven layers include a physical layer 
corresponding to layer 1, a data link layer corresponding to layer 2, a network 
layer corresponding to layer 3, a transport layer corresponding to layer 4, a 
session layer corresponding to layer 5, a presentation layer corresponding to layer 
6, and an application layer corresponding to layer 7. Each layer in the OSI model 
only interacts directly with the layer immediately above or below it. 
[0015] As depicted in Fig. 1, different computers can communicate directly with 
each other only at the physical layer. However, different computers can 
effectively communicate at the same layer using common protocols. For 
example, one computer can communicate with another computer at the 
application layer by propagating a frame from the application layer through each 
layer below it until the frame reaches the physical layer. The frame can then be 
transmitted to the physical layer of another computer and propagated through each 
layer above the physical layer until the frame reaches the application layer of that 
computer. 

[0016] The IEEE 802.1 1 standard for wireless local area networks ("WLANs") 
operates at the data link layer, which corresponds to layer 2 of the OSI seven layer 
model, as described above. Because IEEE 802.1 1 operates at layer 2 of the OSI 
seven layer model, layers 3 and above can operate according to the same protocols 
used with IEEE 802 wired LANs. Furthermore, layers 3 and above can be 
unaware of the network actually transporting data at layers 2 and below. 
Accordingly, layers 3 and above can operate identically in the IEEE 802 wired 
LAN and the IEEE 802.1 1 WLAN. Furthermore, users can be presented with the 
same interface, regardless of whether a wired LAN or WLAN is used. 
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[0017] With reference to Fig. 2, an example of an extended service set, which 
forms a WLAN according to the IEEE 802.1 1 standard, is depicted having three 
basic service sets ("BSS**)- Each BSS can include an access point ("AP") and one 
or more stations. A station is a component that can be used to connect to the 
WLAN, which can be mobile, portable, stationary, and the like, and can be 
referred to as the network adapter or network interface card. For instance, a 
station can be a laptop computer, a personal digital assistant, and the like. In 
addition, a station can support station services such as authentication, 
deauthentication, privacy, delivery of data, and the like. 
[0018] Each station can communicate directly with an AP through an air link, 
such as by sending a radio or infrared signal between WLAN transmitters and 
receivers. Each AP can support station services, as described above, and can 
additionally support distribution services, such as association, disassociation, 
distribution, integration, and the like. Accordingly, an AP can communicate with 
one or more stations within its BSS, and with other APs through a medium, 
typically called a distribution system, which forms the backbone of the WLAN. 
This distribution system can include both wireless and wired connections. 
[0019] With reference to Figs. 2 and 3, under the current IEEE 802.1 1 standard, 
each station must be authenticated to and associated with an AP in order to 
become a part of a BSS and receive service from an AP. Accordingly, with 
reference to Fig. 3, a station begins in State 1, where the station is unauthenticated 
to and unassociated with an AP. In State 1, the station can only use a limited 
number of frame types, such as frame types that can allow the station to locate and 
authenticate to an AP, and the like. 

[0020] If a station successfully authenticates to an AP, then the station can be 
elevated to State 2, where the station is authenticated to and unassociated with the 
AP. In State 2, the station can use a limited number of frame types, such as frame 
types that can allow the station to associate with an AP, and the like. 
[0021] If a station then successfully associates or reassociates with an AP, then 
the station can be elevated to State 3, where the station is authenticated to and 
associated with the AP. In State 3, the station can use any frame types to 
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communicate with the AP and other stations in the WLAN. If the station receives 
a disassociation notification, then the station can be transitioned to State 2. 
Furthermore, if the station then receives a deauthentication notification, then the 
station can be transitioned to State 1. Under the IEEE 802.1 1 standard, a station 
can be authenticated to different APs simultaneously, but can only be associated 
with one AP at any time. 

[0022] With reference again to Fig. 2, once a station is authenticated to and 
associated with an AP, the station can communicate with another station in the 
WLAN. In particular, a station can send a message having a source address, a 
basic service set identification address ("BSSID"), and a destination address, to its 
associated AP. The AP can then distribute the message to the station specified as 
the destination address in the message. This destination address can specify a 
station in the same BSS, or in another BSS that is linked to the AP through the 
distribution system. 

(0023J Although Fig. 2 depicts an extended service set having three BSSs, each of 
which include three stations, an extended service set can include any number of 
BSSs, which can include any number of stations. 

[0024] As described above, according to the current IEEE 802.1 1 standard, a 
station is authenticated and associated with an AP to become a part of a BSS and 
thus obtain service. As also described above, the steps in the authentication and 
association process is categorized into 3 states (i.e., State 1, State 2, and State 3). 
Determining the state of a station can be desirable, particularly in analyzing 
problems that the station may be experiencing in obtaining service. 
[0025] For example, with reference to Fig. 4, assume that a station is having 
difficulty in obtaining service from an AP. Determining if the station is able to 
reach State 1, State 2, or State 3 can assist in trouble shooting the problem. 
[0026] Thus, a detector can be located in the WLAN such that the detector can 
receive transmissions sent from and received by the station. Note that the detector 
need not necessarily be physically adjacent the station. Instead, the detector can 
be sufficiently near or adjacent the station such that the reception range of the 
detector covers the station. 
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[0027] By examining the transmissions sent from and received by the station, the 
detector can determine the state of the station. More particularly, different types 
of transmissions can be identified as being indicative of different states. For 
example, in the following table are different types of transmissions and the state 
that they indicate: 



Type of Transmission 


State 


Probe Request Transmitted by Station 


1 


Div\l^£» D tfcnAncp TvOficmittA/i V\\T AT) 

rrt/DC xvesponse 1 ransnuiicu oy r\jr 


i 
i 


Authentication T?i=viiif»ct TVflncmittfvl hv 
/VUUlCIllllsaUUIl IxdjUCal 1 lallSUIUIlGU Uj 


i 
i 


Qtatinn 




Authentication Response w/ Challenge 


1 


Text Transmitted by AP 




Authentication Challenge Response 


1 


Transmitted by Station 




Authentication Final Response 


1 - on negative 


Transmitted by AP 


response 




2 - on positive 




response 


Deauthentication Transmitted by AP 


1 


Disassociation Transmitted by AP 


1 ! 


Association Request Transmitted by 


2 


Station 




Association Response Transmitted by 


2 - on negative 


Station 


response 




3 - on positive 




response 


Higher Layer Protocol Data Transmitted 


3 


by Station or AP 




Table 1 



[0028] Thus, when a transmission sent to or from the station is received, the 
detector examines the transmission to determine if the transmission is one of the 
types of transmissions listed above. If it is, then the detector can determine the 
state of the station that received or sent the transmission. 
[0029] For example, if the detector receives a probe request frame sent by the 
station, then the detector can determine that the station is at State 1 . If the 
detector receives a probe response frame sent by the AP to the station, then the 
detector can determine that the station is at State 1. If the station receives a data 
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frame, which is a higher layer protocol data, sent by the station or received by the 
station, then the detector can determine that the station is at State 3. 
[0030] The detector can also be configured to display the types of transmissions 
as a checklist. For example, the following checklist can be displayed: 



Beacon received by Station 

Probe request sent by Station 

Probe response received by Station 

Auth. request sent by Station 

Auth. challenge received by Station 

Auth. challenge response received by Station 
Auth. final response received by Station 

Assoc. request sent by Station 

Assoc. response received by Station 

Data sent by Station 

Data received by Station 

Table 2 

[0031] When one of the transmissions on the list is detected, then that type of 
transmission is marked. For example, if an authorization request sent by the 
station is received, the detector can "check off* the "Auth. request sent" line from 
above. In this manner, the user of the detector, such as an administrator of the 
WLAN or a trouble-shooter, can more easily determine the state of the station. 
[0032] Additionally, as will be explained below, a station can use one or more 
channels. As such, a separate checklist can be provided for each of the available 
channels. 

[0033] With reference to Fig. 5, as described above, before a station can receive 
service from an AP, the station must be authenticated. In order to increase 
security, an authentication protocol can be implemented in a WLAN environment, 
such as the extensible authentication protocol over LANs (EAPOL) protocol in 
accordance with the IEEE 802. Ix standard. 

[0034] In accordance with the current EAPOL protocol, a station wanting to be 
authenticated, which is referred to as a supplicant, is authenticated using an 
authentication server, such as a remote authentication dial in user service 
(RADIUS) server. As depicted in Fig. 5, the station communicates with the AP, 
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and the AP, which is referred to as the authenticates, communicates with the 
authentication server to authenticate the station. 

[0035] During the authentication process, the station, AP, and authentication 
server exchange a number of transmissions. More specifically, in one exemplary 
mode of operation, the AP sends an "EAP-Request/Identity" transmission to the 
station. The station then sends an "EAP-Response/Identity" transmission to the 
AP. The AP then sends the received "EAP-Response/Identity" transmission to the 
authentication server. In response, the authentication server sends a challenge to 
the AP, such as with a token password system. The AP sends the challenge to the 
station as a credential request The station sends a response to the credential 
request to the AP. The AP sends the response to the authentication server. If the 
response from the station is proper, the authentication server sends an "EAP- 
Success" transmission to the AP, which sends the package to the station. If the 
response is improper, the authentication server sends an "EAP-Failure" 
transmission to the AP, which sends the transmission to the station. It should be 
recognized that the number and types of transmissions exchanged between the 
station, AP, and authentication server can vary depending on the implemented 
mode of operation. 

[0036] As described above, in one exemplary embodiment, a detector can be 
located in the WLAN such that the detector can receive transmissions sent from 
and received by the station. Again, note that the detector need not necessarily be 
physically adjacent the station. Instead, the detector can be sufficiently near the 
station such that the reception range of the detector covers the station. 
[0037] By examining the transmissions sent from and received by the station, the 
detector can determine the state of the station. More specifically, the detector can 
receive the transmissions exchanged between the station and the AP during the 
authentication process described above in accordance with the EAPOL protocol. 
The detector can then determine the state of the station based on the received 
transmissions. More particularly, because the EAPOL transactions occur in state 
3 as 802.1 1 data, the station can be determined as being in state 3. 
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[0038] Additionally, the detector can also be configured to display the types of 
transmissions as a checklist. For example, the following checklist can be 
displayed: 



802.1X initiated sent by Station 

Identity request sent by Station 

Identity response received by Station 

Credential request sent by Station 

Credential response received by Station 
802. IX authentication OK by Station 
802.1X authentication failed by Station 

De-authentication sent by Station 

Data sent by Station 

Data received by Station 

Table 3 

[0039) When one of the transmissions on the list is detected, then that type of 
transmission is marked. For example, if an "EAP-Request/Identity" package sent 
by the AP is received, the detector can "check ofT the "Identity request sent" line 
from above. In this manner, the user of the detector, such as an administrator of 
the WLAN or a trouble-shooter, can more easily determine the state of the station. 
[0040] Additionally, as will be explained below, a station can use one or more 
channels. As such, a separate checklist can be provided for each of the available 
channels. 

[0041] To identify the transmissions sent from and received by the station, the 
detector obtains the MAC address of the station, which can be obtained from the 
source and destination address fields of the transmitted frames. The MAC address 
can also be obtained directly from the station. Alternatively, the MAC address of 
the station can be stored and retrieved from a table of MAC address assignments, 
which can be maintained by an administrator of the WLAN. 
[0042] Additionally, if a particular AP that the station is attempting to 
communicate is known, the particular channel that the AP is operating on can then 
be monitored. If the station is attempting to communicate with multiple APs and 
the identity of those APs are known, then the particular channels that those APs 
are operating on can then be monitored. 
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[0043] Furthermore, the detector can scan the channels of the wireless local area 
network to receive transmissions sent from and received by the station with 
known or unknown APs. As described above, in the current implementation of 
the IEEE 802. 1 1 standard, a total of 1 1 channels are used in the US, 13 channels 
are used in Europe, and 14 channels are used in Japan. For the sake of 
convenience, the following description will assume that the detector and the 
WLAN are located in the US. However, note that the detector can be configured 
to operate with any number of channels and in various countries. 
[0044] In one configuration, the detector is configured to begin scanning by 
monitoring channel 1, then scan down each of the remaining 10 channels. If a 
station is having difficulty obtaining service, it will typically switch channels and 
repeat the association attempt therefore repeating the association failure scenario. 
A station can continuously cycle through the channels in an effort to obtain 
service. As such, the detector is configured to monitor a particular channel for a 
sufficient amount of time so that the station can complete one or more cycles. For 
example, the detector can be configured to monitor each channel for about 3 
seconds. 

[0045] If no transmissions are detected after scanning all of the channels, then the 
station is rebooted. As described above, a station can be configured to cycle 
repeatedly through the channels in an attempt to obtain service. However, a 
station can also be configured to only attempt one cycle and to stop after the last 
channel has been attempted. When the station is rebooted, it typically begins 
operating on channel 1 . As such, by rebooting the station and monitoring on 
channel 1, a transmission sent to or received by the station can be detected. 
However, a station can take some time to reboot, typically a few seconds. As 
such, the detector is configured to monitor channel 1 for a longer duration than the 
other channels. For example, in one configuration, the detector is configured to 
monitor channel 1 for a period of 30 seconds. 

[0046] As described above, the detector can scan the available channels in the 
WLAN. Alternatively, specific channels can be selected to be scanned. Although 
the detector scans the channels, it passively receives the transmissions, meaning 
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that it does not broadcast signals on the WLAN. This has the advantage that 
additional bandwidth on the WLAN is not consumed. 
[0047] The detector can be a station in the wireless local area network. 
Additionally, the detector can be mobile, portable, stationary, and the like. For 
instance, the detector can be a laptop computer, a personal digital assistant, and 
the like. In addition, the detector can be used by a user as a diagnostic tool, by an 
administrator as an administrative tool, and the like. 

[0048] Although the present invention has been described with respect to certain 
embodiments, examples, and applications, it will be apparent to those skilled in 
the art that various modifications and changes may be made without departing 
from the invention. 
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CLAIMS 

We claim: 

1 . A method of determining the state of a station in a wireless local area 
network, wherein the state of the station indicates whether the station has 
authenticated and/or associated with an access point in the wireless local area 
network, the method comprising: 

receiving transmissions exchanged between the station and the access 
point using a detector located adjacent to the station, 

wherein the transmissions are exchanged over the wireless local 
area network; and 

analyzing the received transmissions to determine the state of the station. 

2. The method of claim 1, wherein analyzing comprises: 
examining a received transmission; and 

determining an indicative state of the station associated with the received 
transmission. 

3. The method of claim 2, wherein a first state of the station is associated 
with a first set of transmissions, and wherein determining comprises: 

determining if the received transmission is one of the first set of 
transmissions; and 

identifying the state of the station as being the first state when the received 
transmission is determined to be one of the first set of transmissions. 

4. The method of claim 3, wherein a second state of the station is associated 
with a second set of transmissions, and wherein determining comprises: 

determining if the received transmission is one of the second set of 
transmissions; and 

identifying the state of the station as being the second state when the 
received transmission is determined to be one of the second set of transmissions. 
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5. The method of claim 4, wherein a third state of the station is associated 
with a third set of transmissions, and wherein determining comprises: 

determining if the received transmission is one of the third set of 
transmissions; and 

identifying the state of the station as being the third state when the 
received transmission is determined to be one of the third set of transmissions. 

6. The method of claim 5, wherein the first state indicates the station has not 
been authenticated or associated with the access point, the second state indicates 
that the station has authenticated but not associated with the access point, and the 
third state indicates that the station has authenticated and associated with the 
access point. 

7. The method of claim 1 , wherein the transmissions exchanged between the 
station and the access point comply with an extensible authentication protocol 
over local area networks (EAPOL) protocol. 

8. The method of claim 1, wherein receiving comprises: 
obtaining a medium access control (MAC) address of the station; 
receiving a transmission using the detector, wherein the transmission 

includes a source address and a destination address; and 

determining if the source address or the destination address of the 
transmission is the MAC address of the station. 

9. The method of claim 1 , wherein receiving comprising: 

scanning a plurality of channels used in the wireless local area network 
using the detector; and 

rebooting the station if no transmissions are received during a scan of the 
plurality of channels. 
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10. The method of claim 9, wherein the station operates on a first channel after 
being rebooted, wherein the first channel is one of the plurality of channels used 
in the wireless local area network, and further comprising: 

scanning on the first channel using the detector for a longer period of time 
than other channels of the plurality of channels used in the wireless local area 
network. 

1 1 . The method of claim 1 , wherein analyzing comprises: 

displaying a list of transmissions on the detector, wherein the list includes 
different types of transmissions potentially exchanged between the station and the 
access point; and 

when a received message corresponds to one of the types of transmissions 
in the list of transmissions, indicating on the list of transmissions that the type of 
transmission corresponding to the received message was received. 

1 2. The method of claim 1 1 , wherein the types of transmissions include 
transmissions exchanged between the station and the access point during an 
authentication process in accordance with an extensible authentication protocol 
over local area networks (EAPOL) protocol. 

13. A method of determining the state of a station in a wireless local area 
network, the method comprising: 

receiving a transmission exchanged between the station and the access 
point using a detector located adjacent to the station, 

wherein the transmissions are exchanged over the wireless local 

area network; 

displaying a list of transmissions on the detector, 

wherein the list includes different types of transmissions 
potentially exchanged between the station and the access point, and 

wherein the different types of transmissions are indicative of 
different states of the station; 
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determining if the received transmission is one of the different types of 
transmissions; and 

when a received transmission corresponds to one of the different types of 
transmissions, indicating on the list of transmissions that the type of transmissions 
that the type of transmission corresponding to the received transmission was 
received. 

14. The method of claim 13, wherein the types of transmissions include 
transmissions exchanged between the station and the access point during an 
authentication process in accordance with an extensible authentication protocol 
over local area networks (EAPOL) protocol. 

15. The method of claim 13, wherein a first type of transmissions is associated 
with a first state of the station, wherein the first state indicates the station has not 
been authenticated or associated with the access point. 

1 6. The method of claim 1 5, wherein a second type of transmissions is 
associated with a second state of the station, wherein the second state indicates the 
station has authenticated but not associated with the access point. 

1 7. The method of claim 1 6, wherein a third type of transmissions is 
associated with a third state of the station, wherein the third state indicates the 
station has authenticated and associated with the access point. 

1 8. The method of claim 1 3, wherein receiving comprising: 

scanning a plurality of channels used in the wireless local area network 
using the detector; and 

rebooting the station if no transmissions are received during a scan of the 
plurality of channels. 
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1 9. The method of claim 1 8, wherein the station operates on a first channel 
after being rebooted, wherein the first channel is one of the plurality of channels 
used in the wireless local area network, and further comprising: 

scanning on the first channel using the detector for a longer period of time 
than other channels of the plurality of channels used in the wireless local area 
network. 

20. The method of claim 1 3 further comprising: 
examining a received transmission; and 

determining a state of the station associated with the received 
transmissions. 

2 1 . The method of claim 20, wherein a first state of the station is associated 
with a first set of transmissions, a second state of the station is associated with a 
second set of transmission, and a third state of the station is associated with a third 
set of transmissions, and wherein determining comprises: 

determining if the received transmissions is one of the first, second, or 
third set of transmissions; and 

identifying the state of the station as being the first, second, or third set 
when the received transmission is determined to be one of the first, second, or 
third set of transmissions, respectively. 

22. An apparatus for determining the state of a station in a wireless local area 
network, wherein the state of the station indicates whether the station has 
authenticated and/or associated with an access point in the wireless local area 
network, the apparatus comprising: 

a detector configured to: 

receive transmissions exchanged between the station and the access 
point when the detector is located adjacent to the station; and 

analyze the received transmissions to determine the state of the 

station. 
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23. The apparatus of claim 22, wherein a first state of the station is associated 
with a first set of transmissions, at least a second state of the station is associated 
with at least a second set of transmissions, and wherein the detector is configured 
to analyze the received transmissions by: 

determining if the received transmission is one of the first set or at least 
the second set of transmissions; and 

identifying the state of the station as being the first state or the at least 
second state when the received transmission is determined to be one of the first set 
or the at least second set of transmissions. 

24. The apparatus of claim 23, wherein the first state indicates the station has 
not been authenticated or associated with the access point, and wherein the at least 
second state indicates that the station has authenticated but not associated with the 
access point 

25. The apparatus of claim 24, wherein a third state of the station is associated 
with a third set of transmissions, wherein the third state indicates that the station 
has authenticated and associated with the access point, and wherein the detector is 
configured to analyze the received transmissions by: 

determining if the received transmission is one of the third set of 
transmissions; and 

identifying the state of the station as being the third state when the 
received transmission is determined to be one of the third set of transmissions. 

26. The apparatus of claim 22, wherein the transmissions exchanged between 
the station and the access point comply with an extensible authentication protocol 
over local area networks (EAPOL) protocol. 

27. The apparatus of claim 22, wherein the detector is configured to receive 
transmissions by: 
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scanning a plurality of channels used in the wireless local area network, 
wherein the station is rebooted if no transmissions are received during a scan of 
the plurality of channels. 

28. The apparatus of claim 27, wherein the station operates on a first channel 
after being rebooted, wherein the first channel is one of the plurality of channels 
used in the wireless local area network, and wherein the detector is configured to: 

scan the first channel for a longer period of time than other channels of the 
plurality of channels used in the wireless local area network. 

29. The apparatus of claim 22, wherein the detector is configured to: 
display a list of transmissions, wherein the list includes different types of 

transmissions potentially exchanged between the station and the access point; and 
when a received message corresponds to one of the types of transmissions 
in the list of transmissions, indicate on the list of transmissions that the type of 
transmission corresponding to the received message was received. 

30. The apparatus of claim 29, wherein the types of transmissions include 
transmissions exchanged between the station and the access point during an 
authentication process in accordance with an extensible authentication protocol 
over local area networks (EAPOL) protocol. 

31. A computer-readable storage medium containing computer executable 
code to determine the state of a station in a wireless local area network, wherein 
the state of the station indicates whether the station has authenticated and/or 
associated with an access point in the wireless local area network, by instructing a 
computer to operate as follows: 

receiving transmissions exchanged between the station and the access 
point; and 

analyzing the received transmissions to determine the state of the station. 
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32. The computer-readable storage medium of claim 31, wherein a first state 
of the station is associated with a first set of transmissions, at least a second state 
of the station is associated with at least a second set of transmissions, and wherein 
analyzing comprises: 

determining if the received transmission is one of the first set or at least 
the second set of transmissions; and 

identifying the state of the station as being the first state or the at least 
second state when the received transmission is determined to be one of the first set 
or the at least second set of transmissions. 

33. The computer-readable storage medium of claim 32, wherein the first state 
indicates the station has not been authenticated or associated with the access 
point, and wherein the at least second state indicates that the station has 
authenticated but not associated with the access point 

34. The computer-readable storage medium of claim 33, wherein a third state 
of the station is associated with a third set of transmissions, wherein the third state 
indicates that the station has authenticated and associated with the access point, 
and wherein analyzing further comprises: 

determining if the received transmission is one of the third set of 
transmissions; and 

identifying the state of the station as being the third state when the 
received transmission is determined to be one of the third set of transmissions. 

35. The computer-readable storage medium of claim 3 1 , wherein the 
transmissions exchanged between the station and the access point comply with an 
extensible authentication protocol over local area networks (EAPOL) protocol. 

36. The computer-readable storage medium of claim 3 1 , wherein receiving 
comprises: 
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scanning a plurality of channels used in the wireless local area network, 
wherein the station is rebooted if no transmissions are received during a scan of 
the plurality of channels. 

37. The computer-readable storage medium of claim 36, wherein the station 
operates on a first channel after being rebooted, wherein the first channel is one of 
the plurality of channels used in the wireless local area network, and wherein 
scanning comprises: 

scanning the first channel for a longer period of time than other channels 
of the plurality of channels used in the wireless local area network. 

38. The computer-readable storage medium of claim 3 1 , wherein analyzing 
comprises: 

displaying a list of transmissions, wherein the list includes different types 
of transmissions potentially exchanged between the station and the access point; 
and 

when a received message corresponds to one of the types of transmissions 
in the list of transmissions, indicating on the list of transmissions that the type of 
transmission corresponding to the received message was received. 

39. The computer-readable storage medium of claim 38, wherein the types of 
transmissions include transmissions exchanged between the station and the access 
point during an authentication process in accordance with an extensible 
authentication protocol over local area networks (EAPOL) protocol. 
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